Error Autopsy
The Package the Model Invented That Someone Else Registered
The model suggested a dependency that did not exist, the install command ran anyway, and the name resolved because a stranger had registered it.
Security
The API Key in the Query String That Lived in Every Log
A key passed as a query parameter is copied into access logs, proxy logs, referrer headers and browser history, and rotation does not unlog it.
DevOps
The Secret Scanner That Ran After the Push
The check that detects the leaked credential ran in CI, which runs after the push, which is after the credential is cloned by every mirror, fork and CI runner.
Security
The Egress Rule That Let the Backup Phone Home
The backup job needed one destination, the egress allowlist gained a wildcard to make a Tuesday work, and the exfiltration path stood open for a month…
Security
The Session Cookie Without SameSite That Rode Along Cross Site
A forged form on an attacker's page submitted a request to the real site, and the browser attached the victim's session cookie, because a cookie with no…
Error Autopsy
The Cert Rotated at Midnight and the Pool Kept the Old Handshake
The rotation succeeded, the new certificate was valid and live, and half the fleet still failed at the exact minute of rotation.
Security
The JSON.parse That Became a Prototype Pollution
The payload was ordinary JSON and the merge was ordinary code, but a __proto__ key in the body wrote to Object.prototype, and every object in the process…
Tooling
Reading a Container Image With docker history
Every layer is a transaction and the ledger never lies. docker history shows the secret you deleted, the cache you paid for and the compiler you shipped…
Security
The Model Output That Rendered as HTML in the Browser
The assistant's reply was trusted because a model wrote it, and the reply was inserted with innerHTML, so a crafted input became stored script, and the…
Security
The Agent Held a Token That Could Delete Its Own Task
The task was to summarise a repository, and the token the agent ran with could delete its branches. The scope was copied from a deploy credential, and the…
Tooling
The Sandbox Checklist for Letting an Agent Touch Real Tools
The agent was given a shell and, eventually, a mistake. The boundary that made the mistake cheap was not the model's judgement but the sandbox: disposable…
Security
The Phishing Email That Attacks Your AI Assistant Too
Barracuda Research describes phishing emails carrying two payloads: a social engineering lure for the human and a hidden prompt injection for the AI…